netfilter: nft_reject_bridge: don't use IP stack to reject traffic